WebDisk (WebDav) CSF LFD warnings

[jazee]

I tried using Webdisk for the first time and I'm running Configserver Firewall and getting LFD warnings. I've tried adding the process name to the process ignore file but still getting both of these. Anyone been in the same boat know the best way to handle it?

Excessive resource usage
Resource: Process Time
Exceeded: 21688 > 1800 (seconds)
Executable: /usr/local/cpanel/3rdparty/perl/524/bin/perl
Command Line: cpdavd - authenticated as <removed>
PID: 14431 (Parent PID:11194)
Killed: No

Suspicious process running under user
Executable:
/usr/local/cpanel/3rdparty/perl/524/bin/perl
Command Line (often faked in exploits):
cpdavd - authenticated as <removed>

 

[sktest123]

Add exe /usr/local/cpanel/3rdparty/perl/524/bin/perl to /etc/csf/pignore

 

[jazee]

Wouldn't that filter anything that is run via Perl not just WebDisk (cpdavd)? I just want to exclude cpdavd.

 

[ChrisI]

Hello,

I believe that adding this to the csf.pignore file should prevent those notifications:

exe:/usr/local/cpanel/cpdavd

Thanks!